Chromium: CVE-2026-11304 Use after free in PDFium
CVE-2026-11304
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
#microsoft
共收录 2351 条相关情报。
← 返回所有主题Chromium: CVE-2026-11141 Uninitialized Use in Audio
CVE-2026-11141
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-10980 Insufficient validation of untrusted input in DevTools
CVE-2026-10980
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-11193 Insufficient policy enforcement in Password Manager
CVE-2026-11193
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-11033 Uninitialized Use in WebML
CVE-2026-11033
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium: CVE-2026-10928 Script injection in Headless
CVE-2026-10928
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us
A surge in real-world attacks against agentic AI systems is reshaping how we think about risk. Based on 12 months of red
Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign
Microsoft Threat Intelligence 披露了一起大规模 npm 供应链攻击活动，代号 Miasma。攻击者入侵了 Red Hat 的 npm 组织 @redhat-cloud-services，篡改了超过 90 个版本
Microsoft Build 2026: Securing code, agents, and models across the development lifecycle
Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. The post Microsoft
Malicious npm packages abuse dependency confusion to profile developer environments
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and bu
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. The post Microsoft is named a
Typosquatted npm packages used to steal cloud and CI/CD secrets
The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environm
From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with ma
Unbounded resend loop in BIND 9 resolver
CVE-2026-5950
Unbounded resend loop in BIND 9 resolver
SIG(0) validation during query flood may lead to undefined behavior
CVE-2026-5947
SIG(0) validation during query flood may lead to undefined behavior
Invalid handling of CLASS != IN
CVE-2026-5946
Invalid handling of CLASS != IN
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
CVE-2026-3593
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
BIND 9 server memory exhaustion during GSS-API TKEY negotiation
CVE-2026-3039
BIND 9 server memory exhaustion during GSS-API TKEY negotiation
Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms
Microsoft has been recognized as a Leader in The Forrester Wave™: Workforce Identity Security Platforms, Q2 2026, receiv
From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
微软威胁情报团队报告了一起针对Linux环境的多阶段入侵攻击事件。攻击始于一台暴露在公网的F5 BIG-IP边缘设备，该设备被作为初始访问入口。攻击者利用该设备作为跳板，通过内网横向移动至Confluence服务器，并试图窃取凭证和破坏身份